bergtoys.com

Issued by R3

About this certificate

This digital certificate with serial number 04:47:dc:c1:13:60:11:8e:04:dc:0c:fe:28:95:ca:fd:d9:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bergtoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:47:dc:c1:13:60:11:8e:04:dc:0c:fe:28:95:ca:fd:d9:67
Serial Number (int): 372902624443771115212499487542419572775271
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:7b:32:50:cf:ad:fa:fa:00:f8:be:f0:88:d5:48:69:06:82:8d:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:c1:f8:10:60:f1:f0:ec:9c:b7:51:2f:2c:55:4f:c0:68:d2:ac:d6
Fingerprint (sha256): d4:90:16:11:32:18:f4:c4:3d:30:18:a9:ed:fc:b3:35:ba:2f:ab:2a:41:22:28:21:bf:40:33:a6:6b:76:3c:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bergtoys.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergtoys.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergtoys.com
www.bergtoys.com

Other certificates including the domain name bergtoys.com

(limited to 100 certificates)
helpdesk.matisa.ch
www.bergtoys.com
bergtoys.com
bergtoys.com
e.bergtoys.com
itservicedesk.poundland.co.uk
bergtoys.com
www.bergtoys.com
www.bergtoys.com
support.sodra.com
bergtoys.com
e.bergtoys.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
bergtoys.com
configurator.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
e.bergtoys.com
itservicedesk.poundland.co.uk
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.bergtoys.com
helpdesk.matisa.ch
magento.bergtoys.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
e.bergtoys.com
bergtoys.com
helpdesk.matisa.ch
e.bergtoys.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
configurator.bergtoys.com
helpdesk.acrotec.ch
configurator.bergtoys.com
bergtoys.com
bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
support.sodra.com
e.bergtoys.com
e.bergtoys.com
servicedesk.ecm.software
bergtoys.com
support.sodra.com
itservicedesk.poundland.co.uk
www.bergtoys.com
e.bergtoys.com
e.bergtoys.com
e.bergtoys.com
www.bergtoys.com
www.bergtoys.com
servicedesk.bergtoys.com
www.bergtoys.com
e.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
www.bergtoys.com
configurator.bergtoys.com
support.sodra.com
e.bergtoys.com
magento.bergtoys.com
e.bergtoys.com
bergtoys.com
www.bergtoys.com
bergtoys.com
helpdesk.acrotec.ch
*.bergtoys.com
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for bergtoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnwnvtFSQ+RSDNbkrRV4v
U97Cg0FwvPVBnZJZNOClF3MraWjFuty0S548sSDZiPh6W0fPK7pXn7s+YcQovxVY
lLpkRYFDhkU3bVbXi5/NrvFYE9Ace51XEyXTJIplX7pwiaOIyuYYZ5p1Ztin8XAx
yDE2B4WK1AtoKk/5AfN8qKwttGA72+U8RWPBuithRsMJy6LZxj24YDXx/8T293yd
h6USsRj+myhHrpF7sE1ci99Xv6XoGxnLGHWslw0viipn+DHJ38QAoI3ZHTGcfCB3
ONBUhns6HXRVUNwHpuxDOlEuk32EAqegILczoLC7uVcV9itSjoUPjqCJz6fY3a89
r7n72FlyWBFmCpfZG20DNAgLzu5b2IFQ4KLT2dAop9L4CmbnFCBeqZU5ymXtQutJ
V3lngGCcxkx2QwswRiOmHs6ezi18JeK6ePXMyME0rj96AqqaRT9rCZiDgzf3itK8
xle17HCaAoYGA8An9m++1zblaZG6+aD/7gDGy3BlF9LMj4GbwjbyAHyNsOhRi0TM
Wtt6k5kQdI9vwnBf5SihthWHAek7S8ZvdirEyOVWLBr2BuVUcIbdmiIOHHBO161E
x3l7PwoGQdwC2Lg4YvAFc3G6uzs+K1BtMsVY7Ezv+p/KPJpgb5qBrDH8IHMTuhnd
hTNNyNkmV/M1BeRiZxtawKcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372902624443771115212499487542419572775271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 09:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 09:00:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergtoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648821753504485451911761594659555469189160411401350498949626434021393055183569505389971138423951265731965930714262814017884651739617138000372590039180496093863257753479243884491257915689248017477812231833854460895765871781967247322803869193407919568650783472791609469103436247385634018917593571573332760199159217983040871582177500441783137332616842791257830469036971734755961049987321962154183748642281776138940574845980058962350940143177483503079176106332498988063064624549892053081047933813962476433233667384913300095312137657794219795694651642766262747979870063771419035408650004482026366089321208023902584284464421627849677259711058747297861924662114317685353844536532143593745827355551064322070525232103415319836801129773156163659315047013345423272708148298442256461023888763596588685441791891037090255881609281258215080860373474645292649251032515042638427015650430817742256304188161388821219028757589263595160556910686838728439547503558778447663651497724089479191037131509853821953265999645278113806207667645018273207105432223315740119599624864867121052324345807919807557381572334601649195581510660199188672757173253124783296860731247606469796461442705466248534792470852409517201043695605983999627265327348992938339708425650343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d7b3250cfadfafa00f8bef088d5486906828d88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergtoys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187fff4d1fe000004030046304402204944c7c72196fdd9fb9d05eb23eb8abda7f1a6f70489c779e0d46fe871334a040220316abfa41b1af322323a7fa451cab77e189dcdc2e70fcffd1a9c98c000325219007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187fff4d1f0000004030047304502202e2819cf1977072fbe0e16fb1a806d30df5b166588b70f01c60531ea71ede00402210098157968920512588e9428f73a4eac51e672c364f7c9ab196828506b4147aa50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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